Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/1/34352e3138392e39392e302f32342d3234203d3e20323639353739.roa
File:                     34352e3138392e39392e302f32342d3234203d3e20323639353739.roa (raw, json)
Hash identifier:          0G89Zb7ZWwkGOLZyYZUK0J2czSW+QGFxcEtUPueP7bo=
Subject key identifier:   A2:AF:8F:31:82:D9:F1:BC:57:F8:EF:02:63:3B:25:E2:4B:D1:F8:DB
Certificate issuer:       /CN=7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0
Certificate serial:       0170F7C7E49F9BCEB81F4434470DB4D8F72EE233
Authority key identifier: 7E:A4:26:2C:73:E9:C3:CB:DF:61:1C:6B:5D:05:E1:CE:5B:58:1B:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/1/34352e3138392e39392e302f32342d3234203d3e20323639353739.roa
Signing time:             Wed 03 Apr 2024 18:30:03 +0000
ROA not before:           Wed 03 Apr 2024 18:25:03 +0000
ROA not after:            Wed 02 Apr 2025 18:30:03 +0000
asID:                     269579
IP address blocks:        45.189.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:70:f7:c7:e4:9f:9b:ce:b8:1f:44:34:47:0d:b4:d8:f7:2e:e2:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0
        Validity
            Not Before: Apr  3 18:25:03 2024 GMT
            Not After : Apr  2 18:30:03 2025 GMT
        Subject: CN=A2AF8F3182D9F1BC57F8EF02633B25E24BD1F8DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3c:93:6e:81:0f:40:20:90:50:c1:75:5a:c5:
                    6c:54:c7:57:12:ac:93:e5:0e:33:94:14:71:b4:f2:
                    fc:80:c4:bd:f7:c4:58:85:9b:fe:1d:ab:72:a3:6d:
                    89:3d:5f:eb:5c:57:b1:2a:81:b6:21:c2:6d:38:ba:
                    d3:18:c4:f4:17:5c:87:12:5e:c6:2f:6f:8b:1d:43:
                    6c:60:05:1e:bb:0c:d8:a9:83:ce:87:8c:9e:29:fc:
                    2d:14:a9:e5:46:52:28:5a:97:08:a9:ad:6b:f3:49:
                    a2:53:29:3e:cf:de:5b:42:3f:8f:54:eb:04:66:d4:
                    3f:b2:80:42:de:cc:a6:08:58:a9:9f:8b:be:23:97:
                    b3:bb:e3:93:69:71:29:32:e6:1f:91:d3:fb:40:6c:
                    3f:e3:57:ab:f9:ef:de:7c:04:dc:f1:d5:91:44:80:
                    c9:56:d2:78:ed:eb:6e:ff:d1:71:79:d9:a2:5f:00:
                    84:a8:ce:c1:2f:da:14:96:4a:f4:5c:b6:ba:8b:1f:
                    f3:eb:9f:3b:54:cd:cd:96:a0:22:59:ea:de:d0:db:
                    f3:09:f1:f5:64:a4:7b:43:6c:9a:be:4b:8d:99:27:
                    4d:ec:3b:66:88:71:51:a6:ed:1e:b7:ef:40:f1:58:
                    8d:5b:53:0e:67:7d:4e:dc:a9:e3:02:88:94:84:85:
                    71:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AF:8F:31:82:D9:F1:BC:57:F8:EF:02:63:3B:25:E2:4B:D1:F8:DB
            X509v3 Authority Key Identifier:
                keyid:7E:A4:26:2C:73:E9:C3:CB:DF:61:1C:6B:5D:05:E1:CE:5B:58:1B:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/1/7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/1/34352e3138392e39392e302f32342d3234203d3e20323639353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ec:c8:d8:a1:48:83:f1:01:c8:96:b8:08:08:d2:11:0b:07:bb:
         59:1f:0f:e0:95:ae:f6:1a:b7:63:ed:8b:69:5c:60:c7:aa:0a:
         6a:1a:ab:b9:ad:e6:3b:3d:ea:39:bb:94:56:88:fe:71:24:ca:
         10:c4:fa:36:97:26:e6:7a:a3:90:c4:6f:f6:34:1f:ef:f1:6b:
         fc:72:c3:2e:a6:9f:94:07:5b:10:dc:06:f9:50:66:5b:c9:0e:
         c6:d7:1a:31:2a:16:91:32:d3:44:29:19:20:e0:3b:09:4d:6d:
         2c:d3:08:5a:c0:7d:97:fd:a8:78:51:14:34:14:5f:7f:48:2a:
         3e:42:07:e0:3d:ae:cb:fe:cf:8c:8f:15:2f:47:a8:4a:39:01:
         57:ba:9e:23:fc:da:d8:d0:36:20:4c:83:90:d8:1f:9d:3b:67:
         84:5b:7f:91:69:07:17:d4:4e:41:72:0d:2a:6d:2a:0e:0f:9a:
         56:4a:ea:51:d7:d5:37:f4:b9:59:4e:0c:fe:3e:52:43:34:7b:
         b2:30:bd:c6:58:13:9a:d7:9b:81:96:f2:ae:8a:7f:75:c4:7d:
         21:85:d2:4a:03:de:bc:f7:e9:0b:2c:77:72:da:8d:06:74:0a:
         0a:fd:6f:c5:5f:80:d2:de:e1:fd:d3:8d:18:98:c0:f0:03:12:
         1a:1b:86:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:02 2024 by rpki-client on console-ams.rpki-client.org